This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json) Hash identifier: CtBUGmoJ7/xBoxJYQbzOYrW91WkBTvuxRVwUbDzr01Y= Subject key identifier: 90:FC:9D:54:20:B2:9E:D1:8C:98:BE:F7:76:2B:84:F5:DD:DA:0E:84 Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3 Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3 Certificate serial: 019AF5E5ECA76ADF2A952470FA9213E386E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 23:01:17 +0000 Manifest this update: Sat 06 Dec 2025 23:01:17 +0000 Manifest next update: Sun 07 Dec 2025 23:01:17 +0000 Files and hashes: 1: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (hash: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=) 2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: GCrob+jzllufLzaHR0tHy8c2NBicJFAJyEntIWtRjO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:ec:a7:6a:df:2a:95:24:70:fa:92:13:e3:86:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3 Validity Not Before: Dec 6 23:01:17 2025 GMT Not After : Dec 7 23:01:17 2025 GMT Subject: CN=90fc9d5420b29ed18c98bef7762b84f5ddda0e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e8:66:5e:a4:67:50:c6:28:4d:19:50:43:12: 37:b0:cb:49:7b:b2:2c:f4:73:36:8c:5f:0f:3f:5b: 3d:fc:e8:a5:fe:95:69:e9:11:f2:7f:88:5a:cf:13: e6:4f:69:33:a8:71:10:f5:24:f1:31:f4:33:4e:09: 5f:4f:2a:b9:b7:ae:84:fa:39:97:a1:a7:4c:ea:c4: d8:13:d8:ad:56:c6:8e:35:f3:58:6c:19:cd:d1:65: ee:8c:d6:45:c9:29:26:c9:df:16:2b:2a:c3:b3:de: 89:78:8c:20:21:75:55:9b:5b:80:43:7f:fb:1a:a6: 3d:b3:a1:3a:76:b0:43:c3:68:53:6d:95:87:4d:96: fd:62:b4:d4:37:70:17:8e:99:11:87:a0:99:9f:1f: a7:b2:c3:67:63:2c:35:48:44:aa:6d:6e:1e:7e:d6: 0d:f9:f8:a0:10:0c:75:ce:8f:eb:a9:7f:f0:cc:5d: b3:2d:e1:3d:c7:12:45:72:3b:e9:25:f2:27:56:d5: e8:42:9f:f2:79:f5:0d:a4:a0:13:86:86:aa:20:f9: 44:34:5d:62:55:b3:e2:90:63:7a:c6:c2:2b:79:7b: 84:ae:35:06:4d:57:75:bb:9d:26:4c:89:be:26:04: 7a:22:58:fd:5e:8a:cc:de:39:14:4b:c4:66:e0:90: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FC:9D:54:20:B2:9E:D1:8C:98:BE:F7:76:2B:84:F5:DD:DA:0E:84 X509v3 Authority Key Identifier: keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:18:a0:d0:48:6c:3c:79:d5:17:00:a5:77:10:d3:41:82:26: ae:f2:09:87:93:bf:b4:7e:aa:90:9f:5e:d0:bd:e6:cb:1c:b4: 2f:a5:c7:ee:b4:23:a1:50:f7:22:11:76:9b:22:07:98:4f:ab: b5:8d:83:9d:10:9d:e3:7d:36:69:20:62:f9:bd:23:d1:a6:bf: f4:0a:d9:77:86:2c:da:02:7f:ec:64:47:63:51:27:9b:b3:88: 87:2e:3b:8f:bc:4e:a2:98:12:a5:2c:b9:46:76:63:63:7e:16: 78:71:30:5c:29:cf:a0:35:16:95:1d:bf:42:cf:d5:94:11:b0: 2c:2b:2f:15:b8:7a:ae:86:c0:b1:20:3a:39:73:38:6e:49:fc: 4b:e5:ba:6d:eb:f8:28:61:97:8f:0e:a9:69:9b:5e:2d:c2:b2: 87:af:f8:5c:a5:00:b6:ee:a0:d8:eb:6e:84:fe:b7:a6:86:28: 24:f8:0e:fa:c0:91:da:de:88:56:3f:f0:0b:8d:61:07:4d:a8: 30:48:24:b2:9e:98:36:09:a7:8b:33:8e:04:2e:d1:41:c8:27: 19:8e:29:d0:ce:dd:55:75:cb:67:33:98:8e:e9:62:5f:59:31: 3c:15:61:26:62:a6:81:2b:c7:c4:8f:5e:2f:ab:d5:1f:10:67: d9:54:52:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15eynat8qlSRw+pIT44bhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZTk5YTNmZWVjNjRkNmJhZDA5OGQxYjJkZjBiNTM2YTAz ODhlYTMwHhcNMjUxMjA2MjMwMTE3WhcNMjUxMjA3MjMwMTE3WjAzMTEwLwYDVQQD Eyg5MGZjOWQ1NDIwYjI5ZWQxOGM5OGJlZjc3NjJiODRmNWRkZGEwZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnehmXqRnUMYoTRlQQxI3sMtJe7Is 9HM2jF8PP1s9/Oil/pVp6RHyf4hazxPmT2kzqHEQ9STxMfQzTglfTyq5t66E+jmX oadM6sTYE9itVsaONfNYbBnN0WXujNZFySkmyd8WKyrDs96JeIwgIXVVm1uAQ3/7 GqY9s6E6drBDw2hTbZWHTZb9YrTUN3AXjpkRh6CZnx+nssNnYyw1SESqbW4eftYN +figEAx1zo/rqX/wzF2zLeE9xxJFcjvpJfInVtXoQp/yefUNpKAThoaqIPlENF1i VbPikGN6xsIreXuErjUGTVd1u50mTIm+JgR6Ilj9XorM3jkUS8Rm4JAfzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD8nVQgsp7RjJi+93YrhPXd2g6EMB8GA1UdIwQY MBaAFEjpmj/uxk1rrQmNGy3wtTagOI6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNGE4MTctMjRhNi00YWMwLTkzMzYt N2Q3ODE0YzdhNWY3LzEvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNGE4MTctMjRhNi00YWMwLTkzMzYtN2Q3ODE0YzdhNWY3 LzEvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRig0Ehs PHnVFwCldxDTQYImrvIJh5O/tH6qkJ9e0L3myxy0L6XH7rQjoVD3IhF2myIHmE+r tY2DnRCd4302aSBi+b0j0aa/9ArZd4Ys2gJ/7GRHY1Enm7OIhy47j7xOopgSpSy5 RnZjY34WeHEwXCnPoDUWlR2/Qs/VlBGwLCsvFbh6robAsSA6OXM4bkn8S+W6bev4 KGGXjw6paZteLcKyh6/4XKUAtu6g2OtuhP63poYoJPgO+sCR2t6IVj/wC41hB02o MEgksp6YNgmnizOOBC7RQcgnGY4p0M7dVXXLZzOYjuliX1kxPBVhJmKmgSvHxI9e L6vVHxBn2VRS8w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:19:16 2025 by rpki-client